• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 248
  • Last Modified:

Can I run RDP behind stacked routers

Hope there is a solution to this. I have an installation with a wireless linksys router connected to internet for WIFI to a Cafe. I have a wired linksys router connected (lan port) dhcp to the wireless router and configured static internal for the business with a thru 50 scheme.Is there a way I can rdp to the business server without bypassing the wireless router ?
Rdp works if I unplug wireless and plug wired router into modem by customer finds it to complicated.
1 Solution
Steve JenningsIT ManagerCommented:
You want to RDP externally into a device behind the wireless and wired routers? Your description is a little unclear.

You'd need to port forward the inbound connection . . . and DHCP complicates that.

So, if I want to RDP into a PC behind the wireless-->wired setup, I would RDP to (or whatever the public IP address of the wireless router is. The wireless router would then need to pass that request to the wired router, which would need to port forward that request to some machine. If you wanted to be able to RDP into several machines . . . you'd end up having to do port translation.

No need to go any further if this is not your problem or if you understand port forwarding etc.

Good luck,
JohnBusiness Consultant (Owner)Commented:
Most VPN applications have a hard time with double NAT type of arrangements. It depends on the particular software. The only one I know that will plow through this is NCP Secure Entry (www.ncp-e.com). You can also look for NAT Traversal variables to see if that helps.

Another way to get around this is to hook one wireless router up in bridge mode so that users get their IP address from the base router. Then there is more likelihood that VPN packets will traverse.  ... Thinkpads_User
hoobydooby2Author Commented:
Your understanding is clear and I do have port forwarding on the internal (wired router) But you lost me on port translation
Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

If you want to RDP from the internet, you will need a port forwarding rule on the wireless router, from the specified port number to the wired router's IP.
And then a port forwarding rule on the wired router for that port number to the server's IP.

Also, in this situation, it would be unusable for the wired router to be obtaining an external IP via DHCP.    Both WAN and LAN  IPs  need to be static and in different subnets,  with the  default gateway on the internal router set to the  'external' router's  LAN IP  (on the same subnet as the internal router's WAN interface).

Stacking routers in this manner is not recommended,  and there can be various types of subtle connectivity issues for the hosts stacked behind the 2nd router that attempting to stack routers will cause for various protocols.   It is most recommended to disable NAT on the internal wired router, place its LAN interface on a separate subnet,  set default gateway to the external router,  and establish a static route on the external router for the  internal router's LAN  subnet  with destination of the internal router's WAN IP address.
Steve JenningsIT ManagerCommented:
port translation . . . so if I want to connect to 3 PCs behind the stack but I only have one public IP address to target I need some way of direction my connection request to PC1 or PC2 or PC3. That is, lets say the public IP address is So I send an RDP request to, how are you going to indicate that you want PC1 or PC2 or PC3 if you are directing all TCP requests for port 3389 to a single PC? There are several different ways to handle this and one would be to send a request to PC1 as "" and to PC2 as "" and to PC3 as "".

This of course presents another minor technical issue, but one that's easily solvable.

Plus, if I need to RDP into a bunch of PCs over the internet, I'd give them static IP addresses purely to add a little deterministic behavior.

Good luck,
hoobydooby2Author Commented:
I am far from this job site and will try Stevej's solution when I return. This makes the most sense for my application.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Microsoft Azure 2017

Azure has a changed a lot since it was originally introduce by adding new services and features. Do you know everything you need to about Azure? This course will teach you about the Azure App Service, monitoring and application insights, DevOps, and Team Services.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now